CAN'T Get to the Internet

Greetings,
Intranetwork is working great, a couple of users can not get to the Internet.
WinXpPro machines. I have uninstalled/reinstalled IE. I am sure it is a virus. It started two weeks ago with one user not being able to access the Internet. Now, four users cannot get online. I have tried everything except fdisk. Can anyone identify the virus?
LVL 1
Lyndy333Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

kfullartonCommented:
Try this online virus scanner:

http://housecall.trendmicro.com/
0
rpggamergirlCommented:
For the lose of connection, winsockfix will most likely fix it.
http://www.softpedia.com/get/Tweak/Network-Tweak/WinSockFix.shtml

Many viruses can mess up with internet connection,
Have you tried, Ewido anti-malware?
Download and install the free version of Ewido anti-malware.
http://www.ewido.net/en/download/
Update first then scan in safe mode.

Or, show us a hijackthis log:
Please download HijackThis 1.99.1
http://www.cyberanswers.org/forum/uploads/HijackThis1991.exe
Open Hijackthis, click "scan and save a logfile" don't fix anything yet, just upload the logfile created, go here and paste your Hijackthis log, http://www.rafb.net/paste/
then at the bottom left corner click "paste"
Copy the address/url and post it here:

Or copy and paste the log at;
http://www.hijackthis.de/ 
and click "Analyse", click "Save".  Post the link to the saved list here.
0
adamtodd16Commented:
Go to services (Control Panel > Admin Tools > Services)  and check for 'Routing and Remote Access' If this service is not running; start it and then attempt to access the Internet. You should be all set.
0
Increase Security & Decrease Risk with NSPM Tools

Analyst firm, Enterprise Management Associates (EMA) reveals significant benefits to enterprises when using Network Security Policy Management (NSPM) solutions, while organizations without, experienced issues including non standard security policies and failed cloud migrations

ashburyCommented:
r u using proxy server or routing and remote access via windows server or ICS.

It might not b a virus. try pinging , nslookup enter the IP address instead of URL(address)
0
Lyndy333Author Commented:
adamtodd...
That didn't work...   :[
0
Lyndy333Author Commented:
ashbury...

I can ping internal network only including firewall, just not yahoo or google or anything else on the Web. When I open IE, I can see the IP address of yahoo, it tries to connect, and then I see (briefly) dnserror.html. DHCP and DNS are runninig fine. No proxy servers on this network.
0
adamtodd16Commented:
Was the service running?  Did you attempt to run something such as adaware or hijackthis?
0
Lyndy333Author Commented:
adamtodd...
The service was not running. I started it, tried to log on but couldn't, set the service to automatic. Then hard booted the pc. Adaware came up with nothing.
adamtodd &

rpggamergirl.....

See the log file from hijackthis:

http://www.rafb.net/paste/results/Wrm7LQ50.html

0
adamtodd16Commented:
Can the users login to the computers and not access the internet or cannot they not even get logged in? Just want to clarify.

hijackthis doesn't look too out of the ordinary - are these users experiencing any pop-ups or other issues?
0
Lyndy333Author Commented:
adamtodd....
Users can log on and get to network drives and use Lotus Notes to send and receive e-mail. I don't know if they have received any unusual pop-ups, or reported anything out of the ordinary to me.
0
Lyndy333Author Commented:
rpggamergirl...
ewido found nothing :[
0
rpggamergirlCommented:
Hijackthis entries has nothing for me, do you know those 017 Domain name = rcsnt?

Have you checked this settings.
Please go to "Start" -> "Control Panel", and choose "Network Connections".
Right click on your default connection, usually Local Area Connection or Dial-up Connection if you are using Dial-up, and left click on properties.
Double-click on the Internet Protocol (TCP/IP) item and select the radio button that says Obtain DNS servers automatically.
Click OK twice, and restart your computer.

Also check:
IE > Internet Options > LAN Settings
make sure nothing is checked there, especially the box "use a proxy server for your LAN"
I had problem connecting online when that box was checked.
I unchecked it, and after putting on a new modem/router, again it auto checked somehow.
0
Lyndy333Author Commented:
rpggamergirl....
Yes, I have tried all of these things, I appreciate your comments. I will double check tomorrow though.
0
ashburyCommented:
Just check on the Gateway / Firewall  if the client ip is locked for internet access .On filrewall see the status for those specific IP who cannot access the internet.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Security

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.